This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/48ik9Khc9bwNkkrBE8Hq8nyPLJQ.roa File: 48ik9Khc9bwNkkrBE8Hq8nyPLJQ.roa (raw, json) Hash identifier: G+pMaiAd3oiyR8Jcr/GIPWGop+xZAW9x7l8zsFkauPs= Subject key identifier: E3:C8:A4:F4:A8:5C:F5:BC:0D:92:4A:C1:13:C1:EA:F2:7C:8F:2C:94 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D449D6FC01BF8D72B11C299D9BD06 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/48ik9Khc9bwNkkrBE8Hq8nyPLJQ.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211729 IP address blocks: 2a10:ccc0:d00::/44 maxlen: 48 2a10:ccc6:66c0::/44 maxlen: 48 2a10:ccc6:66ce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:44:9d:6f:c0:1b:f8:d7:2b:11:c2:99:d9:bd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3c8a4f4a85cf5bc0d924ac113c1eaf27c8f2c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:e4:b3:f6:44:98:41:ab:a2:b1:ac:c2:2e: b7:7f:ba:a1:77:24:f1:86:cd:75:03:4f:cc:c8:5f: e6:8c:5d:64:af:47:58:8a:bd:46:46:0b:b7:b6:cd: 7e:47:4d:e2:f9:c3:30:29:c5:fd:47:3b:ee:be:85: 33:eb:e0:dd:0a:ad:1c:6f:58:a5:3e:34:22:9b:3b: fb:3a:95:4b:c3:8f:b8:09:0f:20:df:da:14:8a:b5: 0a:23:93:59:6c:25:ff:fe:32:56:fa:92:75:57:89: 6c:39:b7:4d:28:e9:c3:bc:5e:2e:f8:46:f2:67:65: 64:8f:d3:6c:e8:27:c4:32:33:25:67:ef:f8:33:9c: 69:af:0a:8b:38:5b:aa:05:c0:1e:db:7d:7e:d1:77: 51:9f:eb:a4:cd:57:37:f7:65:dd:e7:ef:f7:1e:4f: b1:72:68:96:6f:02:32:22:ad:d5:1e:c5:5d:3f:9a: ce:c7:14:b8:18:88:21:57:f1:91:4f:e5:46:59:1e: 21:15:23:4e:00:fd:75:48:7c:d9:1d:5a:12:f8:92: d1:ba:56:c2:7a:54:e5:3d:a1:a0:b3:27:39:11:62: 11:b0:f0:c4:9f:c7:d3:68:42:b6:a8:06:90:98:a7: 78:c5:64:1f:2c:e7:ae:b4:c0:51:b6:fd:ee:4d:a7: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C8:A4:F4:A8:5C:F5:BC:0D:92:4A:C1:13:C1:EA:F2:7C:8F:2C:94 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/48ik9Khc9bwNkkrBE8Hq8nyPLJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:d00::/44 2a10:ccc6:66c0::/44 Signature Algorithm: sha256WithRSAEncryption 36:16:99:76:16:49:db:6f:7c:bd:07:6f:cc:3b:cc:3e:8c:cf: 49:a7:59:7f:a2:37:f3:0a:ad:b1:eb:e7:86:43:42:cd:11:04: 9d:b1:2e:86:6b:d0:71:84:bb:9a:e2:70:61:be:50:3c:fa:d6: 9a:7b:d2:76:dd:5d:6e:07:cd:20:df:f8:29:a1:60:0b:d5:1a: 5b:93:31:b1:d5:fa:e6:cb:ba:0a:54:f5:89:e5:c7:c2:19:d9: 3a:1d:eb:ee:76:60:c5:9b:12:1e:96:b2:78:b6:64:1a:65:f4: 46:1a:92:70:5f:65:83:2f:97:da:4c:22:71:ab:e0:84:c6:a0: 50:9e:93:5a:15:cb:cd:f4:9e:f0:9a:a3:f0:f1:ae:52:64:ea: 46:4e:93:28:c1:48:4b:64:47:c1:2b:6a:65:05:f1:24:a8:ae: 70:bf:54:f9:5f:e8:93:5e:1a:eb:a5:2c:1c:88:12:ae:ab:80: 3d:a6:7f:4e:61:d4:7b:54:4f:85:56:90:f2:68:56:a6:7d:da: 6f:56:14:cd:22:9e:e5:72:21:97:33:9a:da:26:38:93:86:3c: 44:d1:84:ff:d6:6d:96:80:2e:4e:74:1a:30:b2:37:45:0e:bf: 5c:65:1f:13:fb:42:ae:27:7f:3b:c0:48:0c:bb:00:64:b5:b5: 9d:a6:be:17 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUSdb8Ab+NcrEcKZ2b0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2M4YTRmNGE4NWNmNWJjMGQ5MjRhYzExM2MxZWFmMjdjOGYyYzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3rks/ZEmEGrorGswi63f7qhdyTx hs11A0/MyF/mjF1kr0dYir1GRgu3ts1+R03i+cMwKcX9RzvuvoUz6+DdCq0cb1il PjQimzv7OpVLw4+4CQ8g39oUirUKI5NZbCX//jJW+pJ1V4lsObdNKOnDvF4u+Eby Z2Vkj9Ns6CfEMjMlZ+/4M5xprwqLOFuqBcAe231+0XdRn+ukzVc392Xd5+/3Hk+x cmiWbwIyIq3VHsVdP5rOxxS4GIghV/GRT+VGWR4hFSNOAP11SHzZHVoS+JLRulbC elTlPaGgsyc5EWIRsPDEn8fTaEK2qAaQmKd4xWQfLOeutMBRtv3uTaeK0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOPIpPSoXPW8DZJKwRPB6vJ8jyyUMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNDhpazlLaGM5YndOa2tyQkU4SHE4bnlQTEpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhDMwA0A AwcEKhDMxmbAMA0GCSqGSIb3DQEBCwUAA4IBAQA2Fpl2Fknbb3y9B2/MO8w+jM9J p1l/ojfzCq2x6+eGQ0LNEQSdsS6Ga9BxhLua4nBhvlA8+taae9J23V1uB80g3/gp oWAL1RpbkzGx1frmy7oKVPWJ5cfCGdk6HevudmDFmxIelrJ4tmQaZfRGGpJwX2WD L5faTCJxq+CExqBQnpNaFcvN9J7wmqPw8a5SZOpGTpMowUhLZEfBK2plBfEkqK5w v1T5X+iTXhrrpSwciBKuq4A9pn9OYdR7VE+FVpDyaFamfdpvVhTNIp7lciGXM5ra JjiThjxE0YT/1m2WgC5OdBowsjdFDr9cZR8T+0KuJ387wEgMuwBktbWdpr4X -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client